Description
Microsoft SharePoint Server 是微软公司推出的企业级协作与内容管理平台，提供文档管理、团队协作、工作流自动化和企业搜索等功能，支持内部部署和混合云架构，广泛应用于大型企业、政府机构和教育组织的内部门户建设和业务流程管理。Microsoft SharePoint Server 存在代码执行漏洞，攻击者可绕过身份验证执行任意系统命令。
Microsoft SharePoint /_layouts/15/ToolPane.aspx 代码执行漏洞（CVE-2025-53770）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.akamai.com/blog/security-research/2025/jul/sharepoint-vulnerability-rce-active-exploitation-detections-mitigations
https://www.wiz.io/vulnerability-database/cve/cve-2025-53770
https://beazley.security/alerts-advisories/sharepoint-0day-vulnerability-under-active-exploitation-cve-2025-53770
https://www.cyberoptic.co.nz/post/sharepoint-toolshell-vulnerability-cve-2025-53770
https://blog.viettelcybersecurity.com/sharepoint-toolshell/
https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/
https://bloo.io/blog/analysis-of-cve-2025-53770-cve-2025-53771-microsoft-sharepoint
https://www.levelblue.com/blogs/spiderlabs-blog/in-the-wild-exploitation-of-cve-2025-53770-and-cve-2025-53771-technical-details-and-mitigation-strategies
https://www.pretera.com/diving-into-toolshell-sharepoint-rce-cve-2025-53770/
https://www.sentinelone.com/blog/sharepoint-toolshell-zero-day-exploited-in-the-wild-targets-enterprise-servers/
https://www.sans.org/blog/critical-sharepoint-zero-day-exploited-what-you-need-to-know-about-cve-2025-53770
https://greyshield.in/research/toolshell-cve-2025-53770/
https://arcticwolf.com/resources/blog/cve-2025-53770/
https://graylog.org/post/adversary-tradecraft-exploitation-of-the-sharepoint-rce/
https://www.rapid7.com/blog/post/etr-zero-day-exploitation-of-microsoft-sharepoint-servers-cve-2025-53770/
https://www.picussecurity.com/resource/blog/cve-2025-53770-critical-unauthenticated-rce-in-microsoft-sharepoint
https://www.greenbone.net/en/blog/toolshell-patch-bypass-prompts-emergency-alerts-for-microsoft-sharepoint/
https://censys.com/advisory/cve-2025-53770/
https://www.crowdstrike.com/en-us/blog/crowdstrike-detects-blocks-sharepoint-zero-day-exploitation/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53770
https://www.cve.org/CVERecord?id=CVE-2025-53770
https://nvd.nist.gov/vuln/detail/cve-2025-53770
https://research.eye.security/sharepoint-under-siege/
https://github.com/kaizensecurity/CVE-2025-53770